Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
File: RYzFKgcHzDQKycf26QKLZLcCZ7w.mft (raw, json)
Hash identifier: fnkOewb1REwkbVWn7L5UjgBCqJ0BhQ1ByCUTtLgJ8fI=
Subject key identifier: 02:92:A4:6B:9A:25:DA:46:CB:19:8F:80:15:15:9F:06:23:77:30:10
Authority key identifier: 45:8C:C5:2A:07:07:CC:34:0A:C9:C7:F6:E9:02:8B:64:B7:02:67:BC
Certificate issuer: /CN=458cc52a0707cc340ac9c7f6e9028b64b70267bc
Certificate serial: 0197B7B35EA0A431FEDFEA2D7A9E22E9EDFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
Manifest number: 070D
Signing time: Sat 28 Jun 2025 18:01:14 +0000
Manifest this update: Sat 28 Jun 2025 18:01:14 +0000
Manifest next update: Sun 29 Jun 2025 18:01:14 +0000
Files and hashes: 1: IkNC-TUcCoYBxsQeLh6_eg3WO0Y.roa (hash: FzBKtoxKdAzZGhoYpGryWwHPZ5WZpqNHKyLplIOiPAU=)
2: RYzFKgcHzDQKycf26QKLZLcCZ7w.crl (hash: JnEdg+JBjrOXaqyKddULSd+9VwxhVlsUxkt1aui4LdM=)
3: _5WIvJfKyXPt7q3eDEUV4dqzXLc.roa (hash: WY6kQSCLPQqO6U8inB26YKVMLyQQktJDfS2xbDWHzWw=)
4: uDI0D6qr7-usCDL-fgv2aBY_bUU.roa (hash: H5Mm89vS+5YR+a0XeYRvNkRodKD27aIsyfCqNBxXQhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:5e:a0:a4:31:fe:df:ea:2d:7a:9e:22:e9:ed:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458cc52a0707cc340ac9c7f6e9028b64b70267bc
Validity
Not Before: Jun 28 18:01:14 2025 GMT
Not After : Jun 29 18:01:14 2025 GMT
Subject: CN=0292a46b9a25da46cb198f8015159f0623773010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e5:aa:4f:95:96:7b:e2:43:27:d8:d7:77:c6:
de:1c:f8:ad:96:5a:09:3c:38:29:b7:dc:15:1e:70:
fd:fa:17:03:a2:22:69:d6:0b:50:6a:35:b8:26:51:
cb:36:13:4c:c0:49:18:af:f1:ef:a9:f4:4a:86:ac:
cd:1b:4d:4b:e2:4b:39:af:bf:20:ff:e2:36:bb:48:
b1:e3:02:59:c4:99:2a:92:c2:5d:ee:6d:9a:6e:7d:
13:ec:2a:3a:dd:50:38:b4:d0:bc:61:a1:57:a6:8b:
bd:10:a0:94:cc:90:e8:01:aa:bb:50:28:50:59:61:
1a:ac:ef:a8:6c:16:8e:44:ce:ac:7b:37:85:19:73:
39:4e:26:2f:33:b1:55:78:2c:ec:d8:69:47:7d:1c:
d0:01:47:07:de:41:85:e1:68:88:a4:4a:dd:7d:05:
5d:f9:85:71:9c:7f:78:df:5e:32:98:78:af:4d:f6:
da:ca:13:14:e9:25:bd:fb:45:e2:f2:ce:6c:1c:de:
4f:81:58:f8:44:75:6b:3c:ef:61:05:c1:af:5c:4e:
e9:30:aa:72:d7:81:2d:3f:fd:4f:80:eb:19:25:35:
c4:02:3d:95:fe:a3:a6:c3:81:00:2a:05:28:74:9f:
fc:e6:1d:57:9a:53:38:a3:08:e1:04:96:68:08:ea:
5b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:92:A4:6B:9A:25:DA:46:CB:19:8F:80:15:15:9F:06:23:77:30:10
X509v3 Authority Key Identifier:
keyid:45:8C:C5:2A:07:07:CC:34:0A:C9:C7:F6:E9:02:8B:64:B7:02:67:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:02:ca:bf:0d:59:ee:66:80:cd:66:b5:e3:73:63:ba:76:aa:
cd:2f:31:2e:4c:19:e7:5b:cf:c6:2b:e6:84:0b:75:54:14:e6:
c8:87:9b:88:a7:71:1e:f1:d6:ee:d7:39:ac:a7:64:4d:1b:26:
0b:dd:bd:c4:87:6a:f3:2e:ec:16:d1:98:08:26:20:d2:e8:89:
b6:e4:6a:84:dc:97:77:b6:b1:cc:f8:db:d8:b3:68:b1:2a:7e:
8b:61:f9:ca:8e:36:b0:33:a7:47:6a:48:34:a9:bc:50:c2:f5:
53:6f:3f:b2:75:37:97:ef:66:77:57:5a:5c:a2:eb:43:e3:5b:
4d:29:5d:28:c3:41:18:b9:17:f2:3f:5c:44:bf:33:72:b2:89:
41:56:7b:6b:d7:fb:fb:e1:23:67:e0:aa:8e:bb:29:d4:87:0f:
ec:32:a3:2c:7c:11:ac:04:07:49:a2:92:7e:d5:5a:07:20:48:
dd:9a:66:ad:a9:f3:0d:69:f0:21:78:da:6a:9b:2c:92:23:96:
d5:76:0e:2a:24:0d:4f:bb:32:99:ad:c0:09:64:54:ae:d0:40:
cb:57:86:3f:94:a0:c6:17:42:34:59:34:0a:23:c9:23:fc:09:
bf:b4:fc:7f:c6:c7:f1:6d:75:70:18:f1:5a:ed:33:d3:63:0f:
0b:69:33:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:50:43 2025 by rpki-client